en
TP-Link Systems Inc. develops and markets connected-networking, smart-home, service-provider, business-networking, and surveillance products. The company operates from Irvine, California and supports a broad portfolio spanning home connectivity, centrally managed business networks, connected devices, and video-surveillance environments.
As of 11/08/2026, TP Link Systems Inc. recorded 1 security vulnerabilities in the last 90 days across 1 products, including 0 rated High or above and 0 known exploited vulnerabilities (KEV) that should be prioritized for immediate remediation.
Over the last 90 days, OC200 v2 had the most security vulnerabilities in the TP Link Systems Inc. ecosystem, with 1 vulnerabilities—approximately 100% of the provider's total vulnerabilities during this period.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
CVE-2026-81531Unauthenticated account information disclosure in TP-Link Omada ControllersCVE-2025-15631Weak Credential Storage in TP-Link Omada DevicesCVE-2025-15630Device Provisioning Race Condition in TP-Link Omada Adoption WorkflowCVE-2025-15629Weak Session Key Generation in TP-Link Omada Adoption ProtocolCVE-2025-15628Hardcoded Certificates in TP-Link Omada Device Communications| Vulnerability | Exploitation status | Fix | Affected product | Published | Severity |
|---|---|---|---|---|---|
CVE-2026-81531Unauthenticated account information disclosure in TP-Link Omada Controllers | Exploitation statusNot exploited | FixYes |
| Published09/08/2026 |
| SeverityMedium |
CVE-2025-15631Weak Credential Storage in TP-Link Omada Devices | Exploitation statusNot exploited | FixYes | Affected productOmada gateways | Published08/03/2026 | SeverityMedium |
|---|
CVE-2025-15630Device Provisioning Race Condition in TP-Link Omada Adoption Workflow | Exploitation statusNot exploited | FixYes | Affected productOmada Controllers | Published08/03/2026 | SeverityMedium |
|---|
CVE-2025-15629Weak Session Key Generation in TP-Link Omada Adoption Protocol | Exploitation statusNot exploited | FixYes | Affected productOmada Controllers | Published08/03/2026 | SeverityMedium |
|---|
CVE-2025-15628Hardcoded Certificates in TP-Link Omada Device Communications | Exploitation statusNot exploited | FixYes | Affected productOmada Controllers | Published08/03/2026 | SeverityHigh |
|---|
CVE-2025-15627Hardcoded Cryptographic Keys in TP-Link Omada Adoption Protocol Authentication | Exploitation statusNot exploited | FixYes | Affected productOmada Controllers | Published08/03/2026 | SeverityMedium |
|---|
CVE-2025-15544Weak Credential Protection During TP-Link Omada Device Adoption | Exploitation statusNot exploited | FixYes | Affected productOmada Controllers | Published08/03/2026 | SeverityMedium |
|---|
CVE-2026-12001Hardcoded Credential Vulnerability in Multiple TP-Link Router Models | Exploitation statusNot exploited | FixYes | Affected productArcher C20 v6 | Published07/27/2026 | SeverityMedium |
|---|
CVE-2026-11834Unauthenticated Command Injection via DHCP Option Handling in Multiple TP-Link Routers | Exploitation statusNot exploited | FixYes | Affected productArcher C20 v5 | Published06/22/2026 | SeverityHigh |
|---|
CVE-2026-9151Command Injection Vulnerability in OpenVPN on Multiple TP-Link Archer Routers | Exploitation statusNot exploited | FixYes | Affected productArcher AX12 v1 | Published06/10/2026 | SeverityHigh |
|---|
CVE-2026-34126Bluetooth Communication Uses Unencrypted Transmission During Initial Setup on TP-Link's Tapo L535E, P300 and D100C | Exploitation statusNot exploited | FixYes | Affected productTapo L535E v1.0, v3.0 | Published05/28/2026 | SeverityHigh |
|---|
CVE-2026-3294Authentication Logic Vulnerability on Multiple TP-Link Range Extenders | Exploitation statusNot exploited | FixYes | Affected productArcher RE305 v1 | Published05/22/2026 | SeverityHigh |
|---|
CVE-2026-34118Heap-based Buffer Overflow Vulnerability Leading to Denial-of-Service in multiple TP-Link Tapo Cameras | Exploitation statusNot exploited | FixYes | Affected productTapo C520WS v2.6 | Published04/02/2026 | SeverityHigh |
|---|
CVE-2026-3227Authenticated Command Injection on TP-Link TL-WR802N, TL-WR841N and TL-WR840N | Exploitation statusActively exploited | FixYes | Affected productTL-WR802N v4 | Published03/13/2026 | SeverityHigh |
|---|
CVE-2025-9293Insufficient certificate validation enables traffic interception in TP-Link Systems Inc. mobile applications | Exploitation statusNot exploited | FixYes | Affected productAginet App | Published02/13/2026 | SeverityHigh |
|---|
CVE-2026-0651Path Traversal on TP-Link Tapo D235, C211, C520WS and C260 via Local https | Exploitation statusNot exploited | FixYes | Affected productTapo C260 v1 | Published02/10/2026 | SeverityMedium |
|---|
CVE-2025-15551Unvalidated response execution enables MitM JavaScript execution in TP-Link Archer and TL-WR routers | Exploitation statusNot exploited | FixYes | Affected productArcher C20 v5 | Published02/05/2026 | SeverityMedium |
|---|
CVE-2026-22226Command Injection Vulnerability on TP-Link Archer BE230 and AX73 | Exploitation statusNot exploited | FixYes | Affected productArcher BE230 v1.2 | Published02/02/2026 | SeverityHigh |
|---|
CVE-2026-22225Command Injection Vulnerability on TP-Link Archer BE230 v1.2 and AXE75 v1.0 | Exploitation statusNot exploited | FixYes | Affected productArcher BE230 v1.2 | Published02/02/2026 | SeverityHigh |
|---|
CVE-2026-22223Command Injection Vulnerability on TP-Link Archer BE230 v1.2 and BE3600 v1 | Exploitation statusNot exploited | FixYes | Affected productArcher BE230 v1.2 | Published02/02/2026 | SeverityHigh |
|---|
CVE-2026-22222Command Injection Vulnerability on TP-Link Archer BE230 v1.2 and AXE75 v2 | Exploitation statusNot exploited | FixYes | Affected productArcher BE230 v1.2 | Published02/02/2026 | SeverityHigh |
|---|
CVE-2026-0631Authenticated Command Injection Vulnerability in Surfshark VPN Login in multiple Archer products | Exploitation statusNot exploited | FixYes | Affected productArcher AXE75 v1 | Published02/02/2026 | SeverityHigh |
|---|
CVE-2026-0630Command Injection Vulnerability on TP-Link Archer BE230 v1.2 and AXE75 v1.0 | Exploitation statusNot exploited | FixYes | Affected productArcher BE230 v1.2 | Published02/02/2026 | SeverityHigh |
|---|
CVE-2026-0919Unauthenticated Denial of Service via Oversized URL in HTTP Parser on TP-Link Tapo C210, C220 & C520WS | Exploitation statusNot exploited | FixYes | Affected productTapo C220 v1 | Published01/27/2026 | SeverityHigh |
|---|
CVE-2026-0834Logic Vulnerability on TP-Link Archer C20, Archer AX53 and TL-WR841N v13 | Exploitation statusActively exploited | FixYes | Affected productArcher C20 v5 | Published01/21/2026 | SeverityHigh |
|---|
CVE-2025-14300Missing authentication in TP-Link Tapo cameras enables local Wi-Fi reconfiguration and denial of service | Exploitation statusNot exploited | FixYes | Affected productTapo C200 | Published12/20/2025 | SeverityHigh |
|---|
CVE-2025-53711TP-Link TL-WR841N, TL-WR842ND and TL-WR949N WlanNetworkRpm.htm buffer overflow | Exploitation statusNot exploited | FixYes | Affected productTL-WR841N v11 | Published07/29/2025 | SeverityMedium |
|---|
27 Results | Page 1 of 1